Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          t5B2K993DCaPSZ5oHj+n17YxdUMqyI2qA9E3oi5lzeI=
Subject key identifier:   DE:D0:05:DA:AA:37:CB:76:59:BE:F3:56:DD:FB:15:07:69:47:C4:D4
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       0195E0B463A567D2F9CE8B6763976B95E6B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          14D0
Signing time:             Sat 29 Mar 2025 07:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:13 +0000
Files and hashes:         1: DS67FdpgmqYiE2CK6kJaukzb9lo.roa (hash: HfSDCgkCLFir/vHCUHB/cRxT5ahnLIFwfyEr46+8muM=)
                          2: PQyZxA46MLTHRc5mobvjFwK5lMw.roa (hash: IucPwjrf1WuArHmWX4CO13FVRQsTCjMdmSkeW1oKCHI=)
                          3: bJdp9vJThsmnU-T4vEJV1p1mH_Y.roa (hash: f3Bk9K95jCENctRrDvO2NphCV9j781ceJJ/eJh+VuWY=)
                          4: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=)
                          5: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=)
                          6: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: xi//lZLCoWQYiZ9DJVAy7CDkbQfKFbonoxEeIZClZGM=)
                          7: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=)
                          8: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:63:a5:67:d2:f9:ce:8b:67:63:97:6b:95:e6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Mar 29 07:01:13 2025 GMT
            Not After : Mar 30 07:01:13 2025 GMT
        Subject: CN=ded005daaa37cb7659bef356ddfb15076947c4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:bb:68:3b:f7:e2:f9:b0:f6:03:98:06:11:
                    2b:8d:6e:a1:82:bb:42:7a:ba:4f:33:cb:c1:03:76:
                    6f:e6:49:47:90:d6:e5:ea:38:22:e1:5b:99:09:d7:
                    2b:00:8b:47:ba:30:a3:d2:19:12:73:9d:dd:02:cb:
                    b7:7b:f1:6c:5e:ff:d3:60:c4:b4:7a:a6:cf:9e:2b:
                    96:c8:ab:31:5d:e1:72:6b:f4:76:28:ba:33:0e:6f:
                    c8:d4:d9:62:5b:cb:b0:f1:f2:42:0d:98:22:22:98:
                    ad:a8:9c:70:ed:02:95:05:d7:72:30:1f:2c:84:73:
                    0e:cb:85:64:9c:7f:e9:b4:99:5c:55:11:c2:00:1f:
                    0a:b8:82:6c:77:f9:de:bf:43:88:39:35:d3:3c:90:
                    9c:86:30:3e:9f:76:59:ad:84:c1:3f:db:ac:91:d5:
                    e7:84:e6:4b:20:17:79:40:4b:cf:7e:bf:08:cd:1f:
                    4d:eb:9c:93:ba:60:9a:98:02:0b:6a:04:07:56:cc:
                    56:6f:bd:e1:15:ab:50:4e:cc:d2:4f:cd:76:68:28:
                    f9:60:4e:97:39:72:f8:84:7b:24:73:95:7e:4d:f5:
                    af:5a:84:f4:b2:7e:51:86:d6:21:d5:db:e9:bb:1a:
                    1d:f6:e3:2e:14:2f:fa:5e:95:3f:3d:42:bd:98:e7:
                    fe:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D0:05:DA:AA:37:CB:76:59:BE:F3:56:DD:FB:15:07:69:47:C4:D4
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:68:ba:67:e8:48:e6:13:fc:4b:39:0f:4c:dd:4b:b6:39:68:
         a7:79:07:9d:68:df:36:cc:14:bc:7f:b5:18:70:c4:49:84:dd:
         39:db:1d:2c:d8:fa:c5:c6:d4:9b:a8:e7:06:74:6e:a2:e2:60:
         30:59:89:5e:42:68:b1:7a:4c:66:03:f7:87:57:e1:6f:45:9b:
         82:a4:51:a0:03:fa:d7:0f:ba:ed:d4:ad:84:1d:38:2c:2d:a2:
         92:9a:5b:e4:15:a9:07:98:ed:bf:03:32:96:08:3d:b6:5c:fa:
         1f:a5:a8:90:fc:24:8e:b0:3d:1f:95:9b:bb:03:4c:9f:5c:14:
         69:d2:27:f3:53:a6:56:fc:93:7d:a8:2b:26:f9:0d:87:df:ac:
         4e:1f:de:1e:e6:aa:e9:e4:6e:c2:54:d4:46:49:93:84:4c:92:
         81:a2:b9:51:36:38:b8:45:1d:0d:ca:7d:2b:5a:b8:1f:18:45:
         e4:ad:dc:66:85:9a:02:51:10:c5:15:35:66:a2:d7:9c:42:1a:
         ab:bf:09:fc:d4:fc:54:1c:58:09:71:02:e7:51:00:50:9d:36:
         05:af:41:6d:1a:d8:e8:9e:ff:e1:53:9b:65:cd:f4:ea:6e:63:
         5c:c0:c0:b0:1f:cf:aa:b3:c3:f8:14:c2:26:b7:12:2a:48:b8:
         ce:96:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----